Mobile phone order scam

[Capa141]

Earlier today, I received multiple emails from Sky. Mobile phone orders, eSIM set up emails, information about your order emails.

I tried to log in to MySky to see what was going on and my account was locked with an 0344 number to call.  I called the number was advised it was a scam and I should have received a phone call from a scammer which would have been how they got my details.. However, I've not received any call from anyone. Nor have any of my family.

The adviser unlocked my account and asked that I change the password on both my emails and Sky account, which I have now done.  She then explained that she will cancel that order before it gets to the courier.

Has anyone else experienced this, and should I be reporting this to the police?

iPhone

[caesarome · Accepted solution]

@Capa141 

If you have changed your password on your account and have reported this to Sky then there is not much more you can do. You just need to be cautious about any emails saying they are from Sky (as they might not be) and if any device turns up then do not do anything but report it to Sky so they can arrange that it is sent back to them.

This link explains more:

https://www.sky.com/help/articles/account-takeover

If you receive an unexpected parcel from Sky get in touch with our customer services team immediately. We can give advice on what to do. Don’t send the parcel anywhere except our returns address.

We’ll give you pre-paid returns packaging to send the parcel back to us.

[Capa141]

Appreciate the feedback. I've heard the courier could be involved so I do plan to contact Sky to arrange the return if I do receive either of them.

[twilight+princess]

As well as changing the password I would recommend adding 2 factor authentication via an authenticator app or text. That way if anyone does have your account details they'd still be blocked by the 2fa. Remember to not only save the recovery code/s shown when setting this up but ensure the app is set to backup to the phone's/app provider's cloud service.

[Capa141]

Is this just when accessing using a mobile? I often use my desktop PC to access my Sky account.

[twilight+princess]

It will be for any access - PC, mobile etc. Hence why I mentioned using an app on your phone.
Usually there's an option to choose not to ask for authentication on the specific device.

[MGil79]

I've had exactly this same thing happen to me yesterday.
Multiple emails with details of an order of two phones. 
Rang sky immediately and they advised me of the scam that's going on. I havent had any phone calls or messages of anyone impersonating sky either so not sure how they got my details. 
Sky advised me that the scammers will be tracking the parcel and would possibly be waiting at my house to intercept the courier !! They told me to make sure I accept the package and do not give it to anyone else as they also may knock on the door and pretend to be sky to come to collect the parcel to take back! 
This is so crazy! it's such a good job I checked my emails at that time otherwise I would have been non the wiser. 
I have since changed my password on Sky and emails. 

[caesarome]

@MGil79 

Have a read of this:

https://www.sky.com/help/articles/account-takeover

Have you been sent any emails recently where it says you need to click a link to keep your account active or similar to this because this is usually how they gain access to your account details.

[mcozzy]

I got multiple emails for orders and got a phone call, they almost had me fooled as their emails look genuine, asking me to accept the delivery and they would send me the return label to return the devices.

I've called sky and found out that's part of the scam and to reject the DPD deliveries. But now I'm concerned to even do that and would rather return the devices to a store...

[caesarome]

@mcozzy 

My post and the link above tells you want to do so you need to call Sky after takking in the device.

Also change your Sky account password as it could be that someone has got access to it:

https://skyid.sky.com/resetpassword/

[mcozzy]

The guy at Sky told me to reject them, the scammers tolde to accept them...

[caesarome]

The only issue with doing that is that you have no proof you have returned the device. If you take it in and return it yourself then you will have the proof of posting receipt. It does say to do this on the link I posted above and personally I would be doing this so I can get a receipt which is important to show that you have returned it should the need arise.